Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: fDwJx6dZHGdVBcYvHAQxpS8aEKEAOPk9M1779N0rcao=
Subject key identifier: 52:92:5C:24:B8:EF:0C:D5:9F:2D:C7:22:FD:C1:A0:F0:4D:52:9A:82
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 019D265F5F3A4B558F361AA30A8232CD56FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 0709
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: JuhDeC8nuDWh0WMetpGyOUxcYop1V2Y999Ri+jq5SSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5f:3a:4b:55:8f:36:1a:a3:0a:82:32:cd:56:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=52925c24b8ef0cd59f2dc722fdc1a0f04d529a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:67:71:08:00:43:c6:90:98:dc:14:af:b5:
28:61:e1:36:91:dc:a0:9c:30:5e:ac:71:f4:8e:98:
0a:33:c7:06:63:f7:d0:b1:ea:66:ec:40:fc:30:ec:
95:ba:ae:31:04:38:51:05:6e:87:22:d8:34:5c:e5:
7f:6f:cf:19:64:26:17:55:fd:e2:76:b2:16:2a:75:
7c:91:7f:b9:aa:d2:cd:54:0e:e9:02:12:6e:f7:4c:
04:1a:41:b5:f9:72:e3:06:0d:95:0d:e3:54:25:3f:
12:91:56:7e:86:6c:7e:9b:d4:35:1a:14:60:ad:5f:
ba:84:95:b9:fb:9e:9c:3d:de:95:15:4f:1f:39:ac:
42:df:ef:ed:78:57:e4:05:51:fa:09:67:4a:00:43:
0c:b6:ce:13:a5:91:c8:9a:9a:e5:d2:77:1c:86:73:
9f:6c:0b:bd:f3:6e:ee:f4:f8:32:4b:0d:f0:c3:57:
3c:2b:eb:0d:11:45:8e:54:fd:ba:25:55:74:1b:8b:
04:98:54:6f:a8:8c:b0:9b:c7:97:d2:0f:da:ca:99:
63:52:c5:64:38:a4:d3:24:92:23:ab:60:a5:5d:f0:
11:5f:b8:5c:fc:f3:8a:fa:47:e6:c5:0d:ec:fc:e4:
18:ab:81:c9:0c:40:7b:63:6f:4b:db:a8:eb:77:59:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:5C:24:B8:EF:0C:D5:9F:2D:C7:22:FD:C1:A0:F0:4D:52:9A:82
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6c:76:de:67:29:1b:a9:35:4a:eb:8c:f5:d0:35:28:06:50:
58:cf:af:78:70:ce:c2:b8:3c:81:41:7a:a4:b7:05:00:fe:c5:
24:73:44:33:71:ab:36:e4:7d:26:7e:6b:c3:da:e3:50:84:82:
da:f5:ce:40:59:94:bc:cd:76:db:1e:b1:20:9d:85:78:7c:5d:
f5:5a:79:c6:b4:56:5b:06:ae:13:4f:8b:5a:a8:e7:53:ac:95:
c2:b8:00:94:17:2b:21:68:77:2f:1b:04:48:82:b3:b3:e6:85:
21:3c:4e:a1:56:b4:1f:d2:c4:74:37:4e:b4:87:6e:29:b8:f3:
fd:5c:ad:2a:94:aa:cb:97:d8:c0:0b:19:2b:3f:ed:51:1f:e4:
3b:7d:2f:54:8d:92:91:65:62:b3:3b:fe:7d:70:9b:25:2f:04:
08:8a:8a:26:62:45:80:ab:b5:c4:bc:d6:b3:4a:76:02:5b:3e:
e3:78:5a:f6:f1:c1:86:d3:9e:58:b6:13:27:58:ff:75:cc:9c:
bf:4e:9e:2c:c7:73:f1:ba:37:2a:cd:6c:87:aa:14:09:3e:c2:
19:d6:74:8f:51:a5:84:8e:33:0b:3f:54:6a:45:7f:df:56:6f:
30:86:a6:10:09:a4:bd:ea:2e:44:b8:d3:48:f2:e1:8c:d6:c3:
1a:85:ba:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX186S1WPNhqjCoIyzVb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj
ODNjZjQwHhcNMjYwMzI1MTkwMTE3WhcNMjYwMzI2MTkwMTE3WjAzMTEwLwYDVQQD
Eyg1MjkyNWMyNGI4ZWYwY2Q1OWYyZGM3MjJmZGMxYTBmMDRkNTI5YTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/dncQgAQ8aQmNwUr7UoYeE2kdyg
nDBerHH0jpgKM8cGY/fQsepm7ED8MOyVuq4xBDhRBW6HItg0XOV/b88ZZCYXVf3i
drIWKnV8kX+5qtLNVA7pAhJu90wEGkG1+XLjBg2VDeNUJT8SkVZ+hmx+m9Q1GhRg
rV+6hJW5+56cPd6VFU8fOaxC3+/teFfkBVH6CWdKAEMMts4TpZHImprl0ncchnOf
bAu9827u9PgySw3ww1c8K+sNEUWOVP26JVV0G4sEmFRvqIywm8eX0g/aypljUsVk
OKTTJJIjq2ClXfARX7hc/POK+kfmxQ3s/OQYq4HJDEB7Y29L26jrd1mydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKSXCS47wzVny3HIv3BoPBNUpqCMB8GA1UdIwQY
MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt
OWRkNTIzMTNhZTdjLzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj
LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmx23mcp
G6k1SuuM9dA1KAZQWM+veHDOwrg8gUF6pLcFAP7FJHNEM3GrNuR9Jn5rw9rjUISC
2vXOQFmUvM122x6xIJ2FeHxd9Vp5xrRWWwauE0+LWqjnU6yVwrgAlBcrIWh3LxsE
SIKzs+aFITxOoVa0H9LEdDdOtIduKbjz/VytKpSqy5fYwAsZKz/tUR/kO30vVI2S
kWViszv+fXCbJS8ECIqKJmJFgKu1xLzWs0p2Als+43ha9vHBhtOeWLYTJ1j/dcyc
v06eLMdz8bo3Ks1sh6oUCT7CGdZ0j1GlhI4zCz9UakV/31ZvMIamEAmkveouRLjT
SPLhjNbDGoW6HA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:46 2026 by rpki-client